API Testing · Junior · Question 67 of 75
Why are HTTPS-only APIs important to check?
- 1HTTP requests can't contain a body at all
- 2HTTPS makes JSON responses smaller and easier to read
- 3Plain HTTP exposes tokens and data to anyone on the network
Show the answer
Correct answer: Plain HTTP exposes tokens and data to anyone on the network
Explanation
Testers check that HTTP is redirected or refused and that tokens are never accepted over plain HTTP.